Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36392e302f32342d3234203d3e20323637353830.roa
File:                     34352e37302e36392e302f32342d3234203d3e20323637353830.roa (raw, json)
Hash identifier:          XgWLgdJB9C2E1KpxF7HLUBcQPWIyHEIzSM1mttZTcJ8=
Subject key identifier:   14:2C:AB:6C:9C:E3:41:C6:5A:4A:04:AD:80:02:12:E9:95:56:D5:54
Certificate issuer:       /CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
Certificate serial:       25F7A54450AB0C5D21A2BE4F5FF932F38D98E280
Authority key identifier: F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36392e302f32342d3234203d3e20323637353830.roa
Signing time:             Tue 05 Mar 2024 23:17:42 +0000
ROA not before:           Tue 05 Mar 2024 23:12:42 +0000
ROA not after:            Tue 04 Mar 2025 23:17:42 +0000
asID:                     267580
IP address blocks:        45.70.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f7:a5:44:50:ab:0c:5d:21:a2:be:4f:5f:f9:32:f3:8d:98:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
        Validity
            Not Before: Mar  5 23:12:42 2024 GMT
            Not After : Mar  4 23:17:42 2025 GMT
        Subject: CN=142CAB6C9CE341C65A4A04AD800212E99556D554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:84:f4:5c:9c:ea:c7:f3:42:4f:12:76:32:33:
                    02:b0:a0:ab:17:1e:61:d1:07:ce:fe:53:85:2c:63:
                    27:ec:93:56:82:3d:0a:a7:50:a0:11:82:1a:08:ad:
                    d9:8d:58:1b:2d:9e:fb:aa:0e:e7:e3:74:1f:1c:ad:
                    50:ba:aa:dd:2f:3e:ad:2e:50:de:b8:74:8d:66:ee:
                    f5:14:24:30:c0:b6:38:f2:4f:f8:d5:a5:b5:44:15:
                    c8:30:2d:6b:1c:86:58:41:1e:e5:7b:6e:c3:5f:5d:
                    c0:a2:43:c2:74:ec:68:73:61:fc:8c:45:16:e0:b8:
                    c8:19:28:45:b9:78:45:d5:32:60:7d:41:3b:4d:fd:
                    f9:42:fa:71:b2:4b:30:42:9e:03:67:6e:31:bc:42:
                    46:63:cc:88:d0:cd:d8:7e:78:c9:2f:10:0d:7e:67:
                    cb:b5:8f:7e:9d:13:5e:5b:e2:26:7a:47:ef:cf:23:
                    91:05:9c:9c:ac:32:af:56:11:af:49:27:eb:26:5d:
                    7f:dc:c7:a9:1b:d8:a7:bc:47:55:67:2f:25:9b:f5:
                    65:cf:64:63:5c:b4:a7:5e:bf:d3:f4:2f:18:89:96:
                    f2:ce:f6:fb:5a:1a:88:08:de:84:5a:13:0b:29:6b:
                    80:c5:7b:4c:a5:98:2b:d5:0a:b0:16:b8:2e:db:1a:
                    ba:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2C:AB:6C:9C:E3:41:C6:5A:4A:04:AD:80:02:12:E9:95:56:D5:54
            X509v3 Authority Key Identifier:
                keyid:F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36392e302f32342d3234203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:ba:5f:28:2d:e8:3e:6b:ee:4b:e0:78:bb:b0:38:5a:1c:a2:
         07:00:9f:40:52:79:57:f0:bd:0e:20:47:dd:02:c0:02:05:47:
         30:ee:11:b9:da:28:ca:52:c3:b6:a5:82:b6:86:8b:ee:8b:30:
         4b:7f:2e:ca:f9:ee:c8:b4:ef:d9:e7:eb:b1:67:c1:24:52:c3:
         6a:27:99:4a:1c:2f:dd:73:98:e7:30:8a:71:71:d7:13:f9:ae:
         0f:f1:e1:bf:b8:10:cc:85:0e:af:8a:29:ae:f3:67:1e:db:96:
         bc:39:16:60:58:c0:53:93:86:3f:00:fa:62:19:27:b1:c4:25:
         2c:c8:6e:6e:21:35:fa:19:d5:4b:5f:93:75:cc:3f:d8:ed:6e:
         4a:a9:b9:64:ba:3c:78:f1:90:8c:2c:a4:25:64:b5:26:0f:0b:
         c2:2b:70:07:09:06:6b:45:63:5e:88:41:50:bc:4b:d6:45:0c:
         b0:04:86:42:26:d1:f8:53:91:e0:0e:97:37:54:b4:31:ef:e8:
         0f:b0:9d:de:93:22:01:f6:b0:ce:00:c2:a4:d1:15:72:13:10:
         bd:37:da:d3:be:58:9e:0f:fb:42:c8:5b:2b:11:8e:3a:af:1f:
         02:37:67:10:d0:40:27:96:71:e1:9f:2c:e3:71:86:4c:0c:b7:
         b6:84:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org